How to set up SSO with Microsoft Entra ID?
This article describes how to configure Microsoft Entra ID as a SAML 2.0 Identity Provider for Kiflo.
You must first enable SSO on your account.
Configure Entra ID
Please refer to the official documentation: https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-register-saml-app
The instructions below may vary depending on changes made by Microsoft.
Create a new enterprise application
Open your Microsoft Azure portal:
- Navigate to Entra ID
- Enterprise applications
- Click New application
- Click Create your own application
- Give it a name: "Kiflo PRM"
- Click Create
On the new app's page:
- Under Manage
- Click on Properties
- Set Assignment required to No
Then:
- Under Manage
- Click on Sign sign-on
- Then SAML
Edit the Basic SAML Configuration section as follows:
- Identifier (Entity ID) = The [Service Provider Entity ID] provided by Kiflo
- Reply URL (Assertion Consumer Service URL) = The [Service Provider Callback URL] provided by Kiflo
In the SAML Certificates section, download the base 64 certificate:
In the Set up section, copy the Login URL:
Configure Kiflo
Go back to Kiflo, on the Security page, fill in the form as follows:
- Identity Provider Login URL = The [Login URL] provided by Microsoft
- Identity Provider Certificate = The [Certificate] provided by Microsoft
Click Save, and you're all set up!